Installation checklist

Prev Next

Verify that you have all information needed for a successful installation.

Trellix DLP Network Prevent – SaaS considerations for installation

Determine

Consideration

Security

  • Use out-of-band management on a network that ePO - SaaS can access to isolate management and network traffic.

  • LAN 1 traffic must not be accessible from outside your organization.

  • Connect any baseboard management controller (BMC) interface to a dedicated secure management network.

  • Logon account — The appliance has a local administrator account for logging on to the appliance console. Change the default administrator password to make the account secure.

  • Control who can access the physical or virtual appliance console.

Tip

Use the encrypted channel for your ICAP traffic. Disable all unused services.

Network information

  • Network interfaces must be assigned with static IP addresses, rather than dynamically assigned IP addresses.

  • In a cluster environment, the virtual IP address must be in the same subnet as the appliance IP address.

  • The cluster ID and the virtual IP address must be different from that of any other Trellix DLP Network Monitor – SaaS or Trellix DLP Network Prevent – SaaS cluster, regardless of the management platform.

Remote Management Module (RMM)

(Hardware appliances only) If you intend to use the RMM for appliance management, use a secure or closed network to connect to the RMM.